CVE-2025-31002

Unrestricted Upload of File with Dangerous Type vulnerability in Bogdan Bendziukov Squeeze squeeze allows Using Malicious Files.This issue affects Squeeze: from n/a through = 1.6...

CVE-2025-31418

CVE-2025-31418 corresponds to a reflected XSS in the Gravel WordPress theme. Public material confirms Gravel versions up to 1.6 are affected. The CVSSv3.1 score in the provided data is 7.1 (High) with Network attack, user interaction required, and changes in confidentiality/integrity/availability...

CVE-2025-31418 WordPress Gravel theme <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in noonnoo Gravel allows Reflected XSS.This issue affects Gravel: from n/a through 1.6...

CVE-2025-31840

Cross-Site Request Forgery CSRF vulnerability in digireturn Simple Fixed Notice dn-cookie-notice allows Cross Site Request Forgery.This issue affects Simple Fixed Notice: from n/a through = 1.6...

WordPress Gravel theme <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Theme Gravel versions = 1.6...

WordPress plugin Simple Fixed Notice 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Simple Fixed Notice A...

PT-2025-14219 · Unknown · Digireturn Simple Fixed Notice

Name of the Vulnerable Software and Affected Versions: digireturn Simple Fixed Notice versions 1.6 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of atta...

WordPress Auto Post After Image Upload plugin <= 1.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Auto Post After Image Upload versions = 1.6...

WordPress plugin Auto Post After Image Upload 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

Ksenia Security Lares WebServer Home Automation URL Redirection

Summary Lares is a burglar alarm & home automation system that can be controlled by means of an ergo LCD keyboard, as well as remotely by telephone, and even via the Internet through a built-in WEB server. Description Input passed via the 'redirectPage' GET parameter in 'cmdOk.xml' script is not...

CVE-2025-31444

Cross-Site Request Forgery CSRF vulnerability in youtag ShowTime Slideshow showtime-slideshow allows Stored XSS.This issue affects ShowTime Slideshow: from n/a through = 1.6...

CVE-2025-22501

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Improve My City Improve My City improve-my-city allows Reflected XSS.This issue affects Improve My City: from n/a through = 1.6...

CVE-2025-22501

CVE-2025-22501: WordPress plugin Improve My City

WordPress Text Selection Color plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Text Selection Color versions = 1.6...

CVE-2025-31444

Cross-Site Request Forgery CSRF vulnerability in youtag ShowTime Slideshow showtime-slideshow allows Stored XSS.This issue affects ShowTime Slideshow: from n/a through = 1.6...

CVE-2025-31450 WordPress Toggle Box plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in phantom.omaga Toggle Box toggle-box allows Stored XSS.This issue affects Toggle Box: from n/a through = 1.6...

CVE-2025-31450 WordPress Toggle Box <= 1.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in phantom.omaga Toggle Box allows Stored XSS. This issue affects Toggle Box: from n/a through 1.6...

CVE-2025-31464 WordPress Text Selection Color <= 1.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nazmur Rahman Text Selection Color allows Stored XSS. This issue affects Text Selection Color: from n/a through 1.6...

CVE-2025-31464

CVE-2025-31464 affects Text Selection Color (WordPress) up to version 1.6. It is a Stored Cross-Site Scripting vulnerability caused by improper neutralization of input during web page generation. The issue requires an authenticated administrator to exploit. Public fixes/patch version are not desc...

WordPress plugin Text Selection Color 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...